
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json)
Hash identifier: WxyTqY7R5i1UVh5qRv3gDQV5UyPvLpHjc5iSEGmRELE=
Subject key identifier: F1:72:30:A9:23:16:40:00:38:F9:39:0F:F6:13:25:EA:C8:1D:1C:5F
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial: 04AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
Manifest number: 048C
Signing time: Mon 27 Jul 2026 01:04:31 +0000
Manifest this update: Mon 27 Jul 2026 01:04:30 +0000
Manifest next update: Mon 03 Aug 2026 01:04:30 +0000
Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: 0x61wXDPqLB0IF0W8Kn9FifUkFwxluNZQ6pPI0qCAJA=)
2: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: FT+yGA0UMj3t+pSIyryVQQ/sEofGBhdL514V1fKn2KU=)
3: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: mD2HqpNx7VAE/fzRvuWKCUkO1WROa4R3hNCfEouu84g=)
4: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: /ti17IFC7q1Ah/qPnVmsDmKH5schjMG9yp+KWaohlII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1195 (0x4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Validity
Not Before: Jul 27 01:04:30 2026 GMT
Not After : Aug 3 01:04:30 2026 GMT
Subject: CN=6a66ae9f-2612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:63:1e:ad:a4:9c:69:2e:7d:1e:8f:e9:40:
99:21:82:87:d5:d5:c9:15:9c:ca:62:c6:6e:2e:76:
11:0c:d5:a7:f8:bc:35:de:c7:3e:84:b0:6b:fe:56:
18:23:df:52:97:83:78:48:91:9f:08:96:cd:05:6f:
33:e1:3e:d5:e2:9a:af:8e:24:e4:c5:d7:99:81:ab:
13:be:b3:6e:40:7a:97:0b:43:fb:94:5f:9c:35:0b:
37:22:f7:97:4a:a9:9c:6c:87:97:0d:0c:60:e9:83:
29:35:ad:55:34:ef:27:5b:6a:e1:a3:33:4a:fe:cd:
dc:ec:49:37:b4:63:2d:28:4e:11:25:6d:bf:05:29:
02:02:b1:d8:db:ce:c6:2e:8e:e5:fe:16:e3:84:78:
3f:c7:6b:b8:ed:70:4f:27:c5:8d:9e:47:5c:49:c6:
22:06:10:90:e2:20:5d:70:19:d0:2c:0a:9e:5c:c5:
62:fb:51:5b:f6:2b:c5:28:e1:54:03:18:c9:90:67:
11:c2:f2:df:42:3d:35:92:71:ef:ec:6d:11:13:de:
9e:95:37:3d:35:28:ef:42:b3:54:b6:01:61:9e:64:
90:f9:71:97:50:2b:0f:4c:8e:4e:bc:e4:25:4e:62:
f4:47:a1:a5:b4:6b:96:4b:b0:17:c0:34:1b:64:54:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:72:30:A9:23:16:40:00:38:F9:39:0F:F6:13:25:EA:C8:1D:1C:5F
X509v3 Authority Key Identifier:
keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:61:9c:b7:08:3e:f6:45:0a:fd:5c:79:ab:18:03:3a:09:42:
8c:d4:5c:91:39:18:79:ad:86:94:3c:f7:26:0f:71:eb:09:8e:
c8:9d:17:b6:1c:c0:a7:36:7d:5c:91:d8:7e:05:e7:12:d6:4e:
f4:01:b4:23:0d:37:9e:c2:99:78:01:83:0f:69:3d:51:bc:e3:
b4:df:d7:0d:fa:1c:f7:2f:b8:9d:61:93:05:b5:0a:9a:ab:ba:
3e:9e:88:56:a1:3a:3a:9b:6f:68:a0:37:c0:52:ba:12:f5:ef:
8f:7d:de:b6:f8:e2:c5:d3:0f:44:17:94:77:9a:eb:2b:e8:9f:
95:0a:50:d8:e9:82:e2:65:03:13:67:01:d8:f2:d9:fb:69:f3:
71:af:62:54:98:8e:85:5d:84:3c:8e:91:99:fb:53:47:20:8d:
6d:d1:ae:b1:25:6c:37:05:61:e5:51:7d:45:af:ca:5b:c7:5e:
6d:10:06:74:a4:17:5a:ab:2a:45:03:17:f1:77:bc:28:3c:47:
fe:cb:82:a2:d1:5a:9c:e3:d8:68:de:39:01:45:df:ce:ca:80:
c6:90:29:77:b0:9c:13:2c:c0:4b:6d:a6:f9:2e:fd:ab:29:ab:
b2:e5:09:99:e1:5d:15:9e:e3:09:78:b0:f7:3e:d1:d0:e4:5f:
17:87:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:09 2026 by rpki-client